AMENDMENTS 

IN THE CLAIMS 

1. (currently amended) A method for processing network management data 
received by a network management system during the monitoring of a network, the method 
comprising: receiving network management data, and determining if the network management 
data indicates the resolution of a previous event generated by the network management system in 

5 response to previously received network management data and changing a severity indicator of 
said previous event dependent on said determining step . 

2. (original) A method as claimed in claim 1, wherein, if the network 
management data indicates the resolution of a previous event, the method further comprises 
marking the previous event as resolved. 

3. (original) A method as claimed in claim 1, wherein the network management 
data is processed in response to the network management system receiving network management 
data from the network. 

4. (original) A method as claimed in claim 1, the network management data 
comprising values of a monitored characteristic of a part of the network for which an event is 
generated if the monitored value exceeds a predetermined threshold, wherein an event list 
includes an unresolved previous event for the monitored characteristic, wherein the step of 

5 receiving network management data comprises receiving a value for the monitored characteristic, 
and the step of determining comprises considering whether the monitored value has been below 
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the predetermined threshold for a preceding time period, and if so determining that the received 
value indicates the resolution of the unresolved previous event. 



5 



5. (original) A method as claimed in claim 4, wherein the step of considering 
comprises, in response to receiving the network management data, comparing a first received 
value for the monitored characteristic with the predefined threshold, and if the value is below the 
predefined threshold, starting a timer, the timer expiring at the end a predefined time period. 

6. (original) A method as claimed in claim 5, wherein the step of considering 
further comprises comparing each subsequent received value for the monitored characteristic 
with the predefined threshold, and if any value exceeds the threshold canceling the timer. 

7. (original) A method as claimed in claim 5, wherein, when the timer expires, 
determining that the monitored value has been below the predetermined threshold for the 
preceding time period. 

8. (currently amended) A method for processing data representing a monitored 
characteristic of a part of the network in a network management system, the method comprising: 
periodically receiving a value for the monitored characteristic; if a received value exceeds a 
predetermined threshold for the monitored characteristic generating an event; and thereafter, 
periodically considering whether the monitored value has been below the predetermined 
threshold for a preceding time period, and if so determining that the event is resolved and 
changing a severity indicator of said event . 
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9 (original) A method as claimed in claim 8, wherein the preceding time period 
is an immediately preceding predetermined time period, and the step of periodically considering 
comprises considering whether the monitored value has been below the predetermined threshold 
for the immediately preceding time period in response to each subsequently received value. 

5 

10. (original) A method as claimed in claim 8, wherein if the step of considering 
determines that the event is resolved, the method further comprises marking the event as 
resolved. 

11. (original) A method as claimed in claim 1, the network management data 
relating to an asynchronous Trap being received by the network management system, wherein 
the step of determining comprises considering if the Trap indicates the possible resolution of an 
event in an event log. 

5 

12. (original) A method as claimed in claim 11, wherein if the Trap indicates the 
possible resolution of an event in an event log, the step of determining further comprises 
considering whether the event log includes a previously received event that is resolved by the 
Trap. 

5 

13. (currently amended) A method for processing data received in an asynchronous 
Trap by a network management system, the method comprising: receiving a Trap from the 
network; considering if the Trap indicates the possible resolution of a event in an event log, and 
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if so farther considering whether th e e vent log includes a pr e viously rec e iv e d ovont that is 
5 r e solv e d by th e Trap if the Trap indicates the possible resolution of a farther event in the event 
log . 

14. (original) A method as claimed in claim 1, wherein the method processes 
network management data previously received by the network management system and stored in 
memory. 

15. (original) A method as claimed in claim 14, wherein the step of receiving 
network management data comprises receiving event data relating to an event stored in memory, 
in response to a scan of previously generated events stored and included in an event log. 

16. (original) A method as claimed in claim 15, wherein the event data relates to 
a recurring event and includes the time of the last occurrence of the event. 

17. (original) A method as claimed in claim 16, wherein the step of determining 
comprises comparing the present time with the time of the last occurrence of the event, and, if 
the time difference is greater than a predetermined time interval, determining that the event is 
resolved. 

5 

18. (original) A method as claimed in claim 17, wherein if the step of 
determining determines that the event is resolved, the method farther comprises marking the 
recurring event as resolved. 
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19. (currently amended) A method for processing event data generated by a network 
management system during the monitoring of a network, the method processing event data 
relating to events previously generated by the network management system a plurality of times 
and which may be entered in the event log as a recurring event, the method comprising 

5 identifying an a recurring event to be processed from the event list; and considering whether the 
condition which caused the event to be generated has occurred in a preceding time period. 

20. (original) A method as claimed in claim 19, wherein, if the step of 
considering determines that the condition which caused the event to be generated has not 
occurred in the preceding time period, determining the event to be resolved. 

21. (original) A method as claimed in claim 20, further comprising marking the 
event in the event list as resolved. 

22. (currently amended) A computer readable medium including a computer 
program for processing network management data received by a network management system 
during the monitoring of a network; the program comprising a program step for receiving 
network management data and for determining if the network management data indicates the 

5 resolution of a previous event generated by the network management system in response to 
previously received network management data and changing a severity indicator of said previous 
event dependent on said determining step . 
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23. (currently amended) A network management system for processing network 
management data received during the monitoring of a network, the system comprising: a 
processor for receiving network management data and determining if the network management 
data indicates the resolution of a previous event generated by the network management system in 

5 response to previously received network management data and changing a severity indicator of 
said previous event dependent on said determining step . 

24. (original) A network management system as claimed in claim 23, further 
comprising memory for storing data relating to events generated by the system, wherein if the 
processor determines that received network management data indicates the resolution of a 
previous event stored in the memory, the processor updates the memory to mark the previous 

5 event as resolved. 

25. (original) A network management system as claimed in claim 24, further 
comprising means for presenting an event list of generated events to a user. 
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